Static task
static1
Behavioral task
behavioral1
Sample
a269a586afe1e4cd05b056ecad2e7d151ca868085a09ffafc8c518febc1580a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a269a586afe1e4cd05b056ecad2e7d151ca868085a09ffafc8c518febc1580a7.exe
Resource
win10v2004-20221111-en
General
-
Target
a269a586afe1e4cd05b056ecad2e7d151ca868085a09ffafc8c518febc1580a7
-
Size
144KB
-
MD5
5366d0aad616bccca622db8f790aadac
-
SHA1
30422ed87f37b8da9de8a8c5e86ebd7c7c179144
-
SHA256
a269a586afe1e4cd05b056ecad2e7d151ca868085a09ffafc8c518febc1580a7
-
SHA512
0e3f038933f5b62e7c90879aa0d917c0ea460c246682b5a90a30962d09fd431649c50725a86fbabf685a158f6129830495b0c5b4f46e10b63d70a3d07c2f5ec2
-
SSDEEP
3072:aWx1BpilDHuxDm8gKsJo/3/MC4S7HVX20Qc3cYtr1Izq6:rFi9uAAsJo/334S7JrIzq6
Malware Config
Signatures
Files
-
a269a586afe1e4cd05b056ecad2e7d151ca868085a09ffafc8c518febc1580a7.exe windows x86
3d9d82379c2ba36eb747e52393cdc147
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
SetThreadContext
ExitProcess
Sleep
CreateProcessA
GetTickCount
GetModuleFileNameA
CreateFileW
GetModuleHandleA
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
GetSystemTime
GetTempPathA
CopyFileA
GetCommandLineA
DeleteFileA
lstrcpyA
VirtualProtect
GetLocaleInfoA
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP
GetCPInfo
HeapSize
SetEndOfFile
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetSystemInfo
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ